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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application. 
Listing of Claims 

1 . (Currently Amended) An encryption apparatus for a common-key cipher, comprising: 

a unit for generating a plurality of plaintext blocks Pj (l<i<N) resulting from separating a 
plaintext P on a specific-length basis, the plaintext including r e dundant data and a message M; 

an encryption operation unit for generating [[a]] random-number blocks Ri (l<i<N+l) 
string R from a secret key, wherein the number of the random-number blocks R i is greater than 
that of the plaintext blocks Pj, gen e rating random numb e r blocks R, (l<i<N+l) from the random 
numb e r string R, and performing an encryption operation for ciphertext blocks Q (l<i<N) 
(l<i<N+2) by using the plaintext blocks P; (l<i<N) and the random-number blocks Rj (l<i<N) 
(l<i<N+l) , wherein the number N of the random number blocks is the same as that of the 
ciphertext blocks; the random - numb e r string R b e ing is longer than th e plaint e xt, and wher e in 
the random - number blocks R 4 (l<i<N+l) being used for th e e ncryption corrg ggend 
corr e sponding to th e plaint e xt blocks P i (l<i<N); and 

a unit for generating a message-authentication-code of the ciphertext blocks Q (l<i<N) 
by using the ciphertext blocks d (l<i<ND and the random-number blocks R j (where 2<i<N+11 
among the generated random-number blocks Ri, wherein the number N of the random-number 
blocks is the same as that of the ciphertext blocks; and 

an output unit for generating and outputting a ciphertext C comprising the ciphertext 
blocks and the message-authentication-code. 

an auth e ntication op e ration unit for 
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generating random numb e r blocks R4 (2<i<N+l) from th e random numb e r string R, and 
p e rforming an auth e ntication op e ration for m e ssag e- auth e ntication - cod e blocks by using 
th e ciph e rtext blocks Q (l<i<N+2) and th e random - numb e r blocks R4 (2<i<N+l), th e random 
number blocks R4 (2<i<N+l) b e ing us e d for the auth e ntication corr e sponding to th e ciph e rtext 
bloc ks C j (l^i < ^N~i~2) 



2. (Cancelled) 

3. (Cancelled) 

4. (Currently Amended) The encryption apparatus for a common-key cipher according to 
Claim L [[2,]] wherein: 

the encryption operation unit is configured to perform p e rforms the encryption operation 
by using an exclusive-OR logical sum, and to output the ciphertext blocks having a length the 
same as that of the plaintext blocks; and 

the message-authentication-code generation unit auth e ntication operation unit is 
configured to perform p e rforming the authentication operation by using an arithmetic 
multiplication and an arithmetic addition , and to output the message-authentication-code 
comprising message-authentication-code blocks Cn+i and C N +? having a length two times longer 
than that of the ciphertext blocks . 

5. (Currently Amended) The encryption apparatus for a common-key cipher according to 
Claim JL, [[2,]] wherein: 
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the encryption operation unit is configured to perform p e rforms the encryption operation 
by using an exclusive-OR logical sum, and to output the ciphertext blocks having a length the 
same as that of the plaintext blocks; and 

the message-authentication-code generation unit auth e ntication op e ration unit is 
configured to perform an performing th e authentication operation by a multiplication on a finite 
field , and to output message-authentication-code comprising message-authentication-code blocks 
Cn+i and Cn+? having a length two times longer than that of the ciphertext blocks. 
and an arithm e tic addition. 

Claims 6-9. (Cancelled) 

10. (Currently Amended) A decryption apparatus for a common-key cipher, comprising: 

a unit for generating a plurality of ciphertext blocks C, (l<i<N) and a message 
authentication-code by €^ (l<i<N+2) r e sulting from separating a ciphertext C on a specific- 
length basis; 

an authentication operation unit configured for 

(a) generating [[a]] random-number string R from a secret key, wherein the 
number of the random-number blocks Ri is greater than that of the ciphertext blocks, g e n e rating 
random numb e r blocks R , (l<i<N+l) from th e random numb e r string R, and 

(b) generating p e rforming an auth e ntication op e ration for message-authentication- 
code blocks of ciphertext blocks Q (l<i<N) by using the ciphertext blocks C; (l<i<N) &-i 
(l<i<N+2) and the random-number blocks Rj (where 2<i<N+l), (l<i<N+l), wherein the number 
N of the random-number blocks is the same as that of the ciphertext blocks, and 
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th e random number s tring R b e ing long e r than th e ciph e rt e xt, th e random numb e r blocks R4 
(l<i<N+l) being used for th e auth e ntication corr e sponding to th e ciph e rt e xt blocks C\ 
(l<i<N+2); and 

(c) comparing the message-authentication-code blocks generated from the 
ciphertext blocks with the message-authentication code blocks included in the ciphertext blocks; 
a decryption operation unit fo r, if the authentication operation has succeeded, g e n e rating 

decryption operation for to obtain plaintext blocks Pj [[P'i]] (l<i<N) by using the ciphertext 
blocks C i 0<i<N) G 1 ; (l<i<N+2) and the random-number blocks Rj (l<i<N) among the 
random-number blocks Ri, wherein the number N of the random-number blocks is the same as 
that of the ciphertext blocks; and 

an output unit for outputting a plaintext P comprising the plaintext blocks P i (l<i<N). 
, th e random numb e r blocks R4 (l<i<N) b e ing us e d for the d e cryption corr e sponding to th e 
ciphertext blocks C' i (l<i<N+2). 



11. (Cancelled) 



12. (Currently Amended) The decryption apparatus for a common-key cipher according to 
Claim lOi [[1 1,]] wherein the decryption operation unit does not perform the decryption 
operation, if the authentication operation has failed. 



Claims 13-23. (Cancelled) 
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24. (New) The decryption apparatus for a common-key cipher according to claim 12, 
wherein: 

the message-authentication included in the ciphertext has a length two times longer than 
the ciphertext blocks; 

the authentication operation unit is configured to perform the authentication operation by 
using an arithmetic multiplication, and outputs the message-authentication-code comprising 
message-authentication-code blocks C n +i and C n+2 , wherein the message-authentication-code has 
a length two times longer than that of the ciphertext blocks; and 

the decryption operation unit is configured to perform the decryption operation by using 
an exclusive-OR logical sum, and to output the plaintext blocks having a length the same as that 
of the ciphertext blocks. 

25. (New) A computer-readable medium having stored thereon instructions which, when 
executed by a processor, cause the processor to perform the steps of: 

generating a plurality of plaintext blocks Pj (l<i<N) resulting from separating a plaintext 
P on a specific-length basis, the plaintext including a message M; 

generating random-number blocks Rj (l<i<N+l) from a secret key, wherein the number 
of the random-number blocks Rj is greater than that of the plaintext blocks Pj; 

performing an encryption operation for ciphertext blocks Q (l<i<N) by using the 
plaintext blocks Pj (l<i<N) and the random-number blocks Rj (l<i<N) wherein the number N of 
the random number blocks is the same as that of the ciphertext blocks; 

generating a message-authentication-code of the ciphertext blocks Cj (l<i<N) by using 
the ciphertext blocks Cj (l<i<N) and the random-number blocks Rj (where 2<i<N+l) among the 
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generated random-number blocks Ri, wherein the number N of the random-number blocks is the 
same as that of the ciphertext blocks; and 

generating and outputting a ciphertext C comprising the ciphertext blocks and the 
message-authentication-code. 

26. (New) The computer-readable medium according to Claim 25, further comprising the 
steps of: 

performing the encryption operation by using an exclusive-OR logical sum; 

outputting the ciphertext blocks having a length the same as that of the plaintext blocks; 

performing the authentication operation by using an arithmetic multiplication and an 
arithmetic addition; and 

outputting the message-authentication-code comprising message-authentication-code 
blocks C N +i and C N +2 having a length two times longer than that of the ciphertext blocks. 

27. (New) The computer-readable medium according to Claim 25, further comprising the 
steps of: 

performing the encryption operation by using an exclusive-OR logical sum; 
outputting the ciphertext blocks having a length the same as that of the plaintext blocks; 
performing an authentication operation by a multiplication on a finite field; and 
outputting the message-authentication-code comprising message-authentication-code 
blocks Cn+i and Cn+2 having a length two times longer than that of the ciphertext blocks. 
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28. (Currently Amended) A computer-readable medium having stored thereon instructions 
which, when executed by a processor, cause the processor to perform the steps of: 

generating a plurality of ciphertext blocks Cj (l<i<N) and a message authentication-code 
by separating a ciphertext C on a specific-length basis; 

generating random-number string R from a secret key, wherein the number of the 
random-number blocks R; is greater than that of the ciphertext blocks; 

generating message-authentication-code blocks of ciphertext blocks Cj (l<i<N) by using 
the ciphertext blocks Cj (l<i<N) and the random-number blocks R (where 2<i<N+l), wherein 
the number N of the random-number blocks is the same as that of the ciphertext blocks; 

comparing the message-authentication-code blocks generated from the ciphertext blocks 
with the message-authentication code blocks included in the ciphertext blocks; 

performing, if the authentication operation has succeeded, a decryption operation fe? to 
obtain plaintext blocks Pj (l<i<N) by using the ciphertext blocks Q (l<i<N) and the random- 
number blocks Ri (where l<i<N) among the random-number blocks Ri, wherein the number N of 
the random-number blocks is the same as that of the ciphertext blocks; and 

outputting a plaintext P comprising the plaintext blocks Pj (l<i<N). 

29. (Currently Amended) The computer-readable medium according to Claim 28, wherein 
the decryption operation unit does not perform the decryption operation, if the authentication 
operation has failed. 
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